Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3231322e3130332e36302e302f32332d3234203d3e2030.roa
File:                     3231322e3130332e36302e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier:          t8S89eSQ35mXywltxvgaESvFjC/Go4dya37yC5pNNB4=
Subject key identifier:   48:02:E8:58:4F:98:86:EB:30:20:85:C5:8A:DA:5A:66:7F:2B:3E:50
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       5C6DFEFF724A28D2FA04036E66C0F007DCE3774B
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3231322e3130332e36302e302f32332d3234203d3e2030.roa
Signing time:             Fri 03 Mar 2023 15:50:14 +0000
ROA not before:           Fri 03 Mar 2023 15:45:14 +0000
ROA not after:            Fri 01 Mar 2024 15:50:14 +0000
asID:                     0
IP address blocks:        212.103.60.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:6d:fe:ff:72:4a:28:d2:fa:04:03:6e:66:c0:f0:07:dc:e3:77:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Mar  3 15:45:14 2023 GMT
            Not After : Mar  1 15:50:14 2024 GMT
        Subject: CN=4802E8584F9886EB302085C58ADA5A667F2B3E50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:03:13:31:25:ab:da:ab:16:08:cb:20:ed:db:
                    89:ab:97:56:ab:73:04:b5:fd:66:93:ab:65:8d:e6:
                    0b:82:c0:57:ff:a5:04:78:96:1d:f5:7a:61:70:48:
                    6d:0f:d3:d6:fb:24:75:97:f5:53:e2:15:4e:ad:08:
                    6c:19:42:89:70:77:86:21:91:df:9a:fe:fe:bb:65:
                    95:aa:e8:38:c8:ea:7d:ce:1e:d0:c9:0b:c1:ff:ff:
                    19:c8:5f:1e:1d:f2:9a:53:ea:3d:c9:74:85:d8:83:
                    5e:f0:97:22:81:bd:e7:f5:27:db:1e:8d:0e:23:e3:
                    d0:98:2b:8d:71:81:55:69:6e:16:3b:aa:87:8f:2f:
                    4d:84:aa:67:2d:9e:10:3b:8e:d6:f8:bd:6b:d2:bd:
                    05:16:6c:1e:f6:4f:01:c3:3e:40:39:23:e8:02:fe:
                    d7:1c:dc:17:66:6d:c6:09:f2:ed:d1:06:13:13:e2:
                    6e:10:c8:0e:88:58:29:07:39:7d:5f:a4:05:27:8e:
                    1a:0d:0e:94:a8:ce:c4:7c:8c:8c:aa:44:ec:cf:56:
                    cb:0b:11:80:80:74:16:10:8e:35:1c:c6:7e:9b:e2:
                    72:bc:66:36:43:d5:f4:d8:d1:68:bb:21:ce:30:cd:
                    f6:86:87:17:ee:06:96:21:9a:9c:9f:5c:ce:29:f4:
                    62:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:02:E8:58:4F:98:86:EB:30:20:85:C5:8A:DA:5A:66:7F:2B:3E:50
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3231322e3130332e36302e302f32332d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.103.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c2:89:48:1e:ef:a0:45:74:4b:45:df:c8:e6:02:e4:a7:5d:c0:
         17:85:eb:73:eb:5a:ff:5b:70:f9:1a:bf:a3:72:7e:32:fa:90:
         99:4d:82:79:0f:3d:22:8f:08:fb:3f:c0:a7:f3:e6:62:3b:32:
         fb:f3:82:7f:7c:40:fd:6c:e5:30:bb:32:60:7b:92:13:36:49:
         23:55:9f:8a:e0:ad:78:61:7d:a9:59:4f:ab:62:8c:ae:33:c3:
         b4:ad:30:0c:eb:b2:fd:62:c1:25:a9:44:27:72:80:0f:a9:f3:
         54:60:4a:d8:81:cc:02:93:cf:89:b6:e3:d2:34:42:a9:5a:61:
         fa:2c:82:7d:d7:37:42:51:27:b4:76:1d:42:a2:58:43:8e:7a:
         97:33:e6:36:dd:5b:85:90:e9:13:d4:dc:e8:6e:94:47:b7:3a:
         a8:03:5a:39:af:d8:42:45:8a:73:c8:40:d2:bb:35:c5:65:1b:
         40:4e:ff:7b:00:27:6a:6c:fa:c9:0e:21:38:ed:3b:09:46:a9:
         1a:7f:73:01:f8:f3:fa:61:51:24:e3:dc:bc:df:fe:d7:19:71:
         2d:50:71:64:5e:f2:b0:70:c9:b0:d6:67:70:30:20:a7:03:06:
         70:32:7c:ad:20:a9:8d:d9:30:10:9d:f4:05:90:63:5b:3c:a1:
         45:51:16:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:37 2023 by rpki-client on console-ams.rpki-client.org